360 Secure SkillHub
360 安全技能中心

Openclaw Security Guard

面向 OpenClaw 的安全审计 CLI，提供密钥检测、配置审计、提示注入检测、npm 依赖 CVE 扫描和 MCP 服务器白名单验证，并支持自动加固、预提交钩子和本地实时仪表盘；宣称零遥测、100% 本地运行。

miloudbelarebia
miloudbelarebia
热度 86.66
最近更新 2026-05-18 12:02:24
分类：安全依赖：代码执行 / 读写文件应用场景：代码审查 / DevOps / 自动化脚本 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add openclaw-security-guard
Metadata
name
openclaw-security-guard
description
Security audit CLI + live dashboard for OpenClaw. Scans for secrets, config issues, prompt injections, vulnerable dependencies, and unverified MCP servers. Zero telemetry.
version
1.0.0
metadata
{"openclaw":{"requires":{"bins":["node"]},"install":[{"kind":"node","package":"openclaw-security-guard","bins":["openclaw-guard","openclaw-security-guard"]}],"emoji":"🛡","homepage":"https://github.com/2pidata/openclaw-security-guard","os":["macos","linux","windows"]}}

OpenClaw Security Guard

The missing security layer for your OpenClaw installation.

What it does

Run openclaw-guard audit to scan your OpenClaw setup across 5 categories:

  • Secrets Scanner -- Detects API keys, tokens, passwords across 15+ formats + entropy analysis
  • Config Auditor -- Checks sandbox mode, DM policy, gateway binding, rate limiting
  • Prompt Injection Detector -- 50+ patterns: instruction overrides, role hijacking, jailbreaks
  • Dependency Scanner -- npm CVE scanning
  • MCP Server Auditor -- Allowlist-based verification of installed MCP servers

Quick start

npm install -g openclaw-security-guard

# Full audit
openclaw-guard audit

# Fix issues automatically (with backup)
openclaw-guard fix --auto

# Launch live dashboard
openclaw-guard dashboard

Features

  • Security Score (0-100) -- one number for your security posture
  • Auto-hardening -- interactive, automatic, or dry-run modes
  • Live dashboard -- real-time monitoring at localhost:18790
  • Pre-commit hooks -- catch secrets before they're committed
  • Multi-language -- English, French, Arabic
  • Zero telemetry -- no tracking, no network requests, 100% local

Links